1621 matches found
Opera 6.0/7.0 opera.PluginContext Native Method Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6814/info Opera ships with a trusted Java class 'opera.PluginContext' that includes a native method that is reportedly prone to denial of service attacks. It is possible for a malicious Java applet to trigger this conditi...
Microsoft Internet Explorer 4/5/6 XML Datasource Applet File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5490/info A problem in Microsoft Internet Explorer could lead to the disclosure of sensitive information. Due to the design of the datasource applet, it may be possible for a user to view the contents of local files via a...
Sun JDK 1.1.x,Sun JRE 1.1.x Listening Socket Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1545/info A set of flaws in multiple vendors' Java implementation allows a malicious applet to open a listening socket to accept network connections against the security policy. Java applications use the...
Symantec Java! JustInTime Compiler 210.65 Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6222/info A vulnerability has been discovered in the Java! JustInTime compiled used by Netscape Communicator, related to the generation of Intel instructions from specially constructed Java bytecode. If a malicous applet ...
Sun/Netscape Java Virtual Machine1.x Bytecode Verifier Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6224/info A vulnerability in the Sun and Netscape Java Virtual Machine has been reported. The vulnerability is related to the bytecode verifier, a component of the Java compiler that ensures legal structure of Java...
opera web browser 7.54 java implementation Multiple Vulnerabilities (1)
No description provided by source. source: http://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Java implementation. These issues may...
opera web browser 7.54 java implementation Multiple Vulnerabilities (2)
No description provided by source. source: http://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Java implementation. These issues may...
Oracle Java APPLET Tag Children Property Memory Corruption
No description provided by source. Source: http://skypher.com/index.php/2010/10/13/issue-18-oracle-java-applet-childre/ SCRIPT o=document.createElementapplet; setTimeoutfunction x=o.children; location.reload; , 1; /SCRIPT Tested with: Windows XP sp3 5.1.2600 MSIE 7.0.5730.13 MSIE 8.0.6001.18702 S...
Sun Java Applet 1.x - Invocation Version Specification Weakness
No description provided by source. source: http://www.securityfocus.com/bid/11757/info Java provides support for dynamic and static versioning when loading applets in the Java plug-in. This means that during the invocation of an applet, a user can request that a particular version of a plug-in be...
Compaq Java Applet for Presario SpawnApp Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/557/info Some Compaq computers come with a Java applet called SpawnApp. This applet is used to run Compaq diagnostic utilities from the local hard drive when certain Compaq websites are viewed. The problem is that the...
Java Applet JAX-WS Remote Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class...
Microsoft Virtual Machine 2000 Series/3000 Series getSystemResource Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/957/info Microsoft's Java Virtual Machine will allow the reading of local file information by a remote Java application. This can be done two ways: 1: Via the getSystemResourceAsStream function. The filename must be...
Firefox Plugin Parameter EnsureCachedAttrParamArrays - Remote Code Execution
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-17-firefox-plugin-parameter-ensurecachedattrparamarrays-remote-code-execution/...
Sun Java Plug-In 1.4.2 _01 Cross-Site Applet Sandbox Security Model Violation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8857/info A vulnerability has been reported in Java implementations that may potentially allow Java applets from two different domains to violate the sandbox security model and share read/write access to data areas. This...
Mac OS X - Java applet Remote Deserialization Remote PoC (updated)
No description provided by source. Critical Mac OS X Java Vulnerabilities Introduction Five months ago, CVE-2008-5353 and other vulnerabilities were publicly disclosed, and fixed by Sun. CVE-2008-5353 allows malicious code to escape the Java sandbox and run arbitrary commands with the permissions...
Sun Java Virtual Machine 1.x Slash Path Security Model Circumvention Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8879/info A vulnerability has been identified in the Sun Java Virtual Machine packaged with JRE and SDK. This issue results in the circumvention of the Java Security Model, and can permit an attacker to execute arbitrary...
Microsoft Virtual Machine Arbitrary Java Codebase Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1812/info An attacker may gain read access on remote systems by specifying a custom codebase in a Java applet, and delivering to the victims via HTML email or a website. Any arbitrary codebase can be referenced by a java...
Sun JRE/SDK 1.x Untrusted Applet Java Security Model Violation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7824/info It has been reported that the Sun Java Runtime Environment does not properly protect trusted java applets. Because of this, it may be possible for an attacker to use a malicious applet to gain access to sensitiv...
opera web browser 7.54 java implementation Multiple Vulnerabilities (3)
No description provided by source. source: http://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Java implementation. These issues may...
Sun Java Plug-In 1.4 Unauthorized Java Applet Floppy Access Weakness
No description provided by source. source: http://www.securityfocus.com/bid/8867/info A weakness has been reported in Java implementations that may constitute unauthorized access by Java applets to floppy devices. This weakness appears to present a flaw in the Java security model. This issue was...